Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: XSo4QoMijyw41LwjlI8HNfaRLp1c4YT38JsJqWOLEbQ=
Subject key identifier: F9:15:D4:5F:E4:E5:AD:1B:7E:40:57:24:38:16:95:E8:C4:FA:B5:B3
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 01A0C9A1D6EE6947CC1FE0E03F8268A711DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 04CE
Signing time: Tue 22 Sep 2026 15:00:21 +0000
Manifest this update: Tue 22 Sep 2026 15:00:21 +0000
Manifest next update: Wed 23 Sep 2026 15:00:21 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: nt1BPovYeyEDkRZ/NLRanEPY3x7o4sAf6rwoFxpRibI=)
2: XKwbgCRt39xf-ucRzd4m1YlT77U.roa (hash: Gig9/Xc/hBqodZHjGszTaZgsvQyq9DUaulQG1yPjjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:d6:ee:69:47:cc:1f:e0:e0:3f:82:68:a7:11:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Sep 22 15:00:21 2026 GMT
Not After : Sep 23 15:00:21 2026 GMT
Subject: CN=f915d45fe4e5ad1b7e405724381695e8c4fab5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:15:bc:5c:fb:bb:3b:42:39:17:28:71:c2:
bc:be:c2:8e:75:bc:53:80:51:a4:2b:f6:33:e3:87:
86:25:21:25:eb:37:32:6f:fb:1b:71:57:a5:5e:72:
b7:62:15:bd:76:af:74:c5:3f:dd:00:a6:6c:6c:f4:
3f:92:11:6c:01:96:9f:91:df:3d:6c:0b:e2:af:32:
fa:72:ae:6b:0d:f6:5f:a5:27:9a:4e:89:24:be:5d:
6a:b0:f7:87:df:a6:4e:e0:02:76:32:88:77:d4:32:
19:f2:1b:ca:7d:d6:d7:b2:5c:f1:d1:de:6e:2d:ed:
21:52:33:98:14:83:ca:8d:d9:fb:0f:71:25:b9:0b:
e9:85:3e:cd:58:36:8b:77:b3:1a:31:f4:a5:71:8f:
f4:c3:cd:f9:38:98:58:85:76:36:ab:27:f2:56:2b:
63:12:45:93:05:4b:da:59:49:9a:fa:f0:6e:a5:73:
24:2f:ff:81:f2:c2:a6:ef:ae:25:39:90:e3:a0:c6:
e8:7f:71:c7:f7:42:27:e8:ce:c7:23:8b:3b:ef:f0:
c8:e5:e9:50:d1:15:44:b8:c4:d1:fd:67:14:2c:68:
60:9e:c1:15:39:92:0b:5b:21:41:85:01:cd:83:8f:
d2:40:69:cd:a1:ac:40:9b:65:2a:79:ec:dd:76:ba:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:D4:5F:E4:E5:AD:1B:7E:40:57:24:38:16:95:E8:C4:FA:B5:B3
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d1:8a:83:86:f6:d4:05:d7:1a:0a:1e:bf:d6:07:4e:ce:48:
6e:e0:a0:76:6d:27:c1:b0:09:1a:14:ef:7f:bf:43:ce:79:cf:
74:85:5f:d4:e1:62:14:4b:79:ff:a2:94:40:6a:84:04:0e:95:
6a:7e:4c:30:b1:cb:69:8f:f8:79:d6:22:f7:f3:a5:db:e4:ef:
3d:8d:59:31:f7:8e:6f:fe:b3:42:6c:f6:62:a4:ea:37:33:9d:
00:9e:6c:fe:d6:1a:df:3c:be:39:18:3a:0e:a5:1e:f1:b4:b9:
0a:1a:91:f9:f6:68:57:b6:d4:a2:c2:5e:56:32:f6:7a:3b:7d:
2b:d3:c1:e4:34:71:83:30:01:01:69:94:47:d4:2f:dc:5c:61:
c4:b5:e5:bf:e8:40:c5:78:2f:8c:ba:40:6c:87:91:a5:65:b0:
fc:54:f7:40:39:80:70:0c:c4:14:66:8e:94:5e:78:be:a4:08:
fd:e2:f8:44:1f:1b:18:94:f6:3f:d0:dc:3d:09:e0:8a:24:33:
c9:61:29:ed:a7:75:96:6e:00:42:cf:c8:c8:cf:2e:25:52:09:
72:17:19:db:11:09:b5:ae:65:d4:7d:a4:ae:55:3c:4f:80:ca:
15:06:7f:00:97:4d:ac:fd:9d:4d:75:fd:5e:78:b6:18:71:0b:
ab:fa:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:27:36 2026 by rpki-client